HIGHER DESCENT ON PELL CONICS. 
III. THE FIRST 2-DESCENT 
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In |Lem2003b] we have sketched the historical development of problems related 
to Legendre's equations ar^ — bs^ = 1 and the associated Pell equation — dy^ = 1 
with d — ah. In jLem2003c] we discussed certain "non-standard" ideas to solve the 
Pell equation. Now we move from the historical to the modern part: below we will 
describe the theory of the first 2-descent on Pell conies and explain its connections 
to some of the results described in tLem2003Ej, leaving the theory of the second 
2-descent and its relations to results from Lem2003c' to another occasion. 

As everyone familiar with the basic arithmetic of elliptic curves will notice, many 
of the results (e.g. those on heights) presented here are special cases of more general 
theorems. 

1. Pell Conics 

Since it is our ultimate goal to develop a theory of the Pell equation that is 
as close to the theory of elliptic curves as possible, we will first introduce a more 
geometric language. 

We will work over a commutative ring R with a unit element, which most ofen 
is Z, Zp, or a finite field of odd characteristic. Thus we may and will assume that 
R is an integral domain with a quotient field of characteristic ^ 2. 

Working with the Pell equation — dY^ — 1 leads to numerous problems 
(not insurmountable, but annoying). For this reason we will work exclusively with 
- AY^ = 4, where 

\ d if = 1 mod 4, 
[Ad if (i = 2, 3 mod 4 

Here and in the rest of this article, d will always denote a squarefree integer; in 
particular, A is squarefree or 4 times a squarefree number. The equation X^ — 
AY^ = 4 with A e i? describes a plane algebraic affine curve C, and the set 

C{R) = {{x, y) £ Rx R: x^ - dy^ ^ A} 

is called the set of i?-integral points on the conic. 

We now define a group law on the set C(Q) of rational points on C by fixing the 
neutral element TV = (2, 0) and defining P + Q = R ior points P,Q,R € C(Z) by 
letting R denote the second point of intersection of the parallel to PQ through N 
(see Figure P). 

[removed] 

Figure 1 . Addition Law on Poll Conics 
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Proposition 1.1. The sum of the two points P — (r, s) and Q = (t, u) in C(Q) is 
_{{'^^,rs) = {r-' -2,rs) ifP^Q, 

^ ^ \ (O^kzi^^MilJllt A {r-t)(s-u) N Afp^n 

Observe that these formulas work in any field in which A is not a square; this 
condition guarantees that the denominator A(s — m)^ ^ ^ 0^ nonzero whenever 

Proof. For adding the points P — (r, s) and Q — {t,u), we have to draw a parallel 
to the line PQ through N and compute its second point of intersection with C. 
Lines through = (2, 0) have the equation Y — m{X — 1) . 

li P — Q, then the slope m of the the tangent at P can be computed by taking 
the derivative of the curve equation and solving for Y'; we find Y' — hence 

m — in P — {r, s) . A simple calculation yields X = i(r^ + As'^) = — 2 and 
Y = rs. 

Now assume that P Q; ii r = t, then P = (r, s) and Q — (r, — s), and the line 
through N parallel to PQ is tangent to N, that is, we have P + Q = N; this agrees 
with the formulas above. 

Thus we may assume that r t; the line through PQ has slope m = ^E^- 
Intersecting this line with C leads to 

{X -2)[X + 2- Am^iX - 2)] = 0; 

since X — 2 gives the point N, the X-coordinate of the second point of intersection 
is given by 

Am2 - 1 

Plugging in TO = ^E^^ we find 

V A(.s — u)^ — (r — t)'^ r ~ t 
Now observe that ^{X-2)= i^^ti0±z^ . □ 

Since we are interested in the integral and not the rational solutions of Pell 
equations, the geometric group law does not seem to be very helpful. Fortunately, 
all is not lost: 

Proposition 1.2. The addition formula is valid over Z; we have 

A(s — u)^ + (r — t)^ rt + Asu {r — t){s — u) ru + st 

A(s-u)2-(r-i)2 " 2 ' A(s-u)2-(r-i)2 " 2 ' 

hence P + Q^ (^ rt+Asu ^ru±st^ ^ Q^-^^ /orpoinfo P = (r, s) and Q ^ {t,u) inC{Z). 

Proof. There is nothing to show if P = Q since, in this case, the coordinates of 
P + Q are obviously integral. 

Thus we only have to consider the case P ^ Q. We have to show that the 
denominator A(s — m)^ — (r — i)^ divides the numerator. Now we can simplify this 
expression by observing 

A(s - w)2 - (r - t)^ = As^ - + Am^ - t^ + 2rt - 2Asu = 2{rt - Asu - 4). 
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Since {rt — Asu — 4)(rM + st) = 4{r — t){s — u), this gives 

^ {r — t){s — u) ^ (r — t)(s — u) {rt — Asu — 4:){ru + st) ru + st 



A{s - u)2 - (r - i)2 2{rt - Asu - 4) 2{rt - Asu - 4) 2 ' 

Observe that if A = 1 mod 4, then r = s,t = u mod 2, hence ru + st = mod 2. 
Now let us look at the numerator of the x-coordinate; since 

4(r2 + As2 +t^ + Au^) ^ (t2 - Au2)(r2 + As^) + - As^){t^ + Au^) 
= 2{r'^t^ - A'^s^u^) = 2{rt + Asu){rt - Asu), 

we find 

2[A(s - u)^ + {r- t)^] = 2p + As^ + t^ + Au^ - 2{rt + Asu)] 
= (rt + Asu){rt - Asu) - 4(ri + Asu)] 
= {rt + Asu){rt - Asu - 4). 

This finally shows 

A(s - u)^ + (r - i)2 _ (rt + Asu){rt - Asu - 4) _ rt + Asu 
A(s-u)2 - (r-i)2 ^ 2(rt - Asu - 4) ^ 2 ' 

and now it follows as before that the x-coordinate of P + Q is integral. □ 

These addition formulas also show that we have a group law over any ring in 
which 2 is a unit or a prime, such as ¥q for odd prime powers q, the ring Zp of 
p-adic integers and its quotient field Qp, or the rings Z5 of S'-integers. 

The group law on Pell conies has a well known algebraic interpretation: consider 
the maximal order Ok = ^[^(^ + v^) ] of the quadratic number field K with 
discriminant A; sending {x,y) £ C(Z) to the unit ^{x + yVd) G induces a 
bijection </) : C(Z) — > Of^. 

Corollary 1.3. The map (j) defined above is an isomorphism of groups. 

Proof. Since (/> is bijective, it is sufficient to show that it is a honiomorphism; but 
this is clear from 

fr + s^/A\ ft + u^/A\ Ifrt + Asu ru + st /— \ 

and Proposition II. 21 □ 

2. History of Group Laws 

Describing the history of group laws, whether on elliptic curves or on conies, is 
a difficult task for various reasons: first, because the concept of abstract groups 
developed very slowly; in fact, the axioms for abstract groups did not become 
common knowledge until the 1890s. The second reason is that the group laws were 
first discovered in a complex environment: the fact that the points on the unit 
circle form a group had been known implicitly since Gauss identified 5*^ with 
the set of complex numbers with absolute value 1 ; these form a group with respect 
to multiplication, as is evident from the relation e'*e** = e*(^+*) known to Euler. 
But who first realized that the set of rational points on also form a group? 

It is somewhat surprising that the algebraic group structure on the unit circle 
C was first defined not over Q but over the finite rings R = Z/nZ: Schonemann 
|Schl889j showed that the set C(Z/nZ) = {{x,y) e Z/nZ : x^ + y"^ = I mod n} is 
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closed with respect to the addition {x, y) + {x' , y') — [xx' — yy' , xy' + x'y). He also 
showed that #C(Z/pZ) = p — (^) annihilates the group C{Z/pZ). Schonemann's 
language was algebraic; the geometric definition of a group law on conies was given 
by Juel |Jue 18961 p. 101]^ who stated it only for circles and hyperbolas. In a 
review for the Fortschritte der Mathematik, Stackel |Stal896| writes about Juel's 
parametrization of conies (see Figure ^ : 

[Die Parameterdarstellung] beruht auf einer eigentiimlichen Art 
geometrischer Addition, die sich iibrigens unter anderem Namen 
schon bei v. Staudt findet. 1st namlich E ein fester Curvenpunkt, so 
stehen die drei Curvenpunkte A, B, C in der Beziehung A + B — C, 
wenn die Geraden AB und EC sich auf einer festen Geraden OU 
schneiden.^ 

[removed] 
Figure 2. Addition Law on Conies 

By taking OU to be the line at infinity we recover the geometric group law 
defined above. 

Veblen & Young |VY1910] gave a simplified account of von Staudt 's theory of 
throws, describing the geometric group law on affine lines and on certain conies. 

The article | Niel908| by Niewenglowski (mentioned by Dickson | Dicl920l vol II, 
p. 396]) also contained a hint at the geometric group law on conies. Niewenglowski 
considers the hyperbola x'^ — ay^ = 1 and writes 

Soient ^(1,0) le sommet, Ai{xi,yi) le premier point entier a coor- 
donnees positives; la parallele menee par A a la tangente an Ai don- 
nera le point ^2(2:2, 2/2); la corde ^1^3 sera parallele a la tangente 
en A2, etc., et Ton obtiendra ainsi tous les points a coordonnees 
entieres et positives.'^ 

The fact that certain arithmetic techniques concerning curves of genus 1 admit a 
geometric interpretation became common knowledge at the end of the 19th century 
through the work of Lucas and Sylvester (see Schappacher |Schl990| '). The algebraic 
geometer E. Turriere jTurl915| became interested in number theoretic problems in 
1915, when he discussed Fibonacci's question whether 5 is a congruent number 
using the hyperbolas y^ — x^ = a and z'^ — x'^ = 6, as well as the cubic uv{u — v) — 
av — bu. In a series of articles |Tur 1 9 1 6T ITur 1 9 1 7l ITur 1 918] he then put forward his 
'arithmogeometry', a geometric investigation of rational points on algebraic curves. 
His plead for a new 'arithmetic geometry' seems to have fallen on deaf ears; I am 
not aware of a single reference to these articles. 



This paper also contains the first explicit statement of the group law on elliptic curves. 

^[The parametrization] is based on a remarkable way of geometric addition, which can be found 
in a different guise already in the work of v. Staudt. In fact, if E is some fixed point on the curve, 
then the three points A, B, C on the curve satisfy A + B = C if and only if the lines AB and EC 
intersect on some fixed line OU. 

''Let A(1,0) be the vertex, Ai{xi,yi) the first integral point with positive coordinates; the 
parallel through A to the tangent at Ai will give the point A2 (2:2 , J/2 ) ; the secant A1A3 will be 
parallel to the tangent at A2, etc., and in this way we obtain all the integral points with positive 
coordinates. 
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Now consider Pythagorean triples (a, b, c), that is, integral solutions of + 6^ = 
c^. We call (a, 6, c) primitive if gcd(a, 6) — 1; every Pythagorean triple can be 
written in the form (Aa, Afo, Ac) for some nonzero integer A and a primitive triple 
(a, 5, c), and Pythagorean triples that are multiples of the same primitive triple are 
called equivalent. 

Idenitfying the equivalence class of the Pythagorean triple (a, b, c) with the ra- 
tional point (f , ^) on the unit circle gives a group structure to equivalence classes 
of Pythagorean triples. Olga Taussky |Taul970] also identified the triples (a, b, c), 
(— a, 6, c), (— 6, — a,c) and (a, — 6, c) coming from multiplication by i on S^; thus 
Taussky's group of Pythagorean triples is isomorphic to C((Q)/C(Q)tors, where 
C((Q)tors = ((0, 1)> is the torsion group of C{Q). Eckert |Eckl984| proved that 
this group is free abelian, and in fact is a direct sum of infinitely many copies of 
Z, one for each prime p = 1 mod 4. This was rediscovered by Tan jTanl996 . who 



worked with the group C(Q) instead. Shastri |Sha20nij determined the group of 
integral points on the unit circle over number fields. 

Other articles dealing with group (or ring) structures on the set of Pythagorean 
triples a re Baldiss erri |Ball999| , Beaure gard fc S uryanaray an |H^T996l IBS1997I 
IBS1999| . Dawson 'Dawl994;, Grytczuk |Gryl997| , Hlawka 'Hla2000i, Wojtowicz 
|Woi2001| . and Zanardo & Zannier ZZ199I] , whereas Mariani Marl962) and Morita 
|Morl986j study groups acting on Pythagorean triples. 

In the modern mathematical literature, the group law on conies is hardly ever 
discussed; an exception is the book |PS1997) by Prasolov & Solovyev, or the web 
site 

http : //www-cabri . imag. f r/abracadabri/Algebre/Groupes/FoliumD .html, 

which contains a detailed exposition of the group law on conies. 



from the group of rational points on C to the elements of norm 1 in , where 
K = Q(-\/A) is the quadratic number field with discriminant A. We know that ip 



3.1. The Set of First Descendants. Now consider any integral point {x, y) E 
C(Q) on the Pell conic C : - AY^ = 4. Write Ay^ ^ - A = (x - 2){x + 2). 
Since gcd(a; + 2, a; — 2) | 4, there are three possible cases: 

(1) X = 1 mod 2: then A = 5 mod 8, gcd(x — 2, a; + 2) = 1, hence x + 2 = ar^ 
and X — 2 = 6s^, where ab = A. Thus ar^ — bs^ = 4. 

(2) X = 2 mod 4: then we find gcd(a; — 2,a; + 2) = 4, hence x + 2 = ar"^, 
X — 2 — bs^, and again ar^ — 5.s^ = 4. 

(3) X = mod 4: then A = 4d with d = 3 mod 4 and gcd(a:; — 2, a; + 2) = 2, so 
X + 2 ^ 2Ar'^, x~2^ 2Bs'^ with ab = d, hence ar^ - bs"^ = 4 for a 2 A, 
b^2B and ab = A. 

The curves 7^ : ar^ — bs^ — 4 are called the first descendants of — AY^ = 4. 
Every integral point on C comes from an integral point on one of the descendants. 



3. The First 2-Descent 




restricts to an isomorphism C(Z) 
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If A < 0, then x'^ + \A\y'^ = 4 implies that x'^ < 4, which in turn shows that 
a; + 2 > unless x ^ —2. Thus the descendants all have the form Ta for positive 
integers a. 

If A > 0, then x > 2 or x < The points with a; > come from descendants 
Ta : ar^ — bs^ — 4 with a > 0. If (x, y) is such a point, then the points (—a;, ±t/) 
will come from the descendant T-i\ja ■ —br^ + as^ = 4 (or, if 4 | A, from '7lA/4fc) 
describing the same curve (up to a change of variables) as 7^. It is therefore 
sufficient to consider descendants Ta for a > squarefree. 

Theorem 3.1. Every integral solution {x,y) of the Pell equation X"^ — Ay^ = 4 
gives rise to an integral solution of one of the equations T : ar^ — bs^ = A, where 
a and b are integers such that a6 = A, and where a is squarefree. 

Conversely, any integral solution (r, s) of T gives rise to an integral solution 
(x, y) of the Pell equation, where x — ar^ — 2 and y = rs. 

Remark 1. If A = 4d with d = 3 mod 4, the descendants : 2ar^ — 2&s^ = 4 
with 4a6 = A coincide with the curves or^ — bs^ — 2 occurring in the theory of 
Legendre (see jLem2nn3bl Section 2]). 

Remark 2. Assume that ar^ — bs^ ~ 4, where ab — A. If s = 1 is a solution, then 
b = ar^ — 4, hence A ^ ab ~ a{ar^ — 4) = a^r^ — 4a. A solution s = 2 implies that 
r = 2m and leads to A = a^m^ — a. Similarly, solutions r = 1, 2 leads to values of 
A that are of Richaud-Degert type A — n'^ + r with r | 4n. 

Example. Consider C(Z) for C : x^ — 205y^ — 4. The associated descendants with 
an integral point (r, s) and the corresponding point (x, y) on C are given below: 



a 


Ta{C) 


(r,s) 


{x,y) 


1 


r^ - 205s2 = 


4 


(2,0) 


(2,0) 


5 




4 


(3,1) 


(43, 3) 


41 


41r2 - 5s2 


4 


(- -) 


(-23 1) 


205 


205r2 - s2 = 


4 


(2 28 \ 
V3' 3 


^802 56 \ 
^9^9' 



The existence of integral points on the last two descendants cannot be excluded via 
congruences alone; this is a case where a second 2-descent would help. 

3.2. The Group Structure. The number of descendants we have to consider is 
always a power of 2, as is the number of descendants with an integral point. This 
could be explained by giving this set of descendants the structure of an elementary 
abelian 2-group. How can we accomplish this? 

1. The Naive Construction. The naive idea is to make the first descendants into an 
elementary abelian group by defining Ta ■% — T^, where ab = cm? for integers c, m 
with c squarefree. This is easily seen to coincide with the group structure defined 
by Dickson Did 930, §25] (see also |Lem2003bp . 

2. Using the Group Structure on the Pell conic. The set of descendants with a 
rational point can be given a group structure as follows: given (r, s) G Zi(Q) and 
{t,u) G 7b(Q), compute the corresponding rational points {x,y) and {z,w) on the 
Pell conic; the sum {x, y) + {v, w) on C(Q) will then come from a rational point on 
some descendant and we put Ta®Tb —T. 
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In order to decide whether these group laws coincide (on the subset of descen- 
dants with a rational point) or not, we need a better way of finding the descendant 
7^ to which an {x,y) G C(Q) gives rise. Observe that since x = ar^ — 2, we can 
recover a by mapping {x,y) € C(Z) to the coset {x + 2)Q^ ^ = aQ^^. Actu- 
ally, wo get a mapping a : C(Q) — > Q^/Q><2 putting a{x,y) = (x + 2)Q^2 
for all {x,y) ^ (—2,0); using the equation — 4 = Ay^, we see that we have 
{x + 2)Q^ ^ = (^x — 2)AQ^ ^ whenever both sides are defined, and this suggests we 
define a(-2, 0) = 



Proposition 3.2. Define a map a : C(Q) — > Q^/Q^ ^ by 
a{x,y) 



(x + 2)Qx2 
^^_AQx2 ifx = -2. 

If P = {x,y) e C(Z) with x > 0, then P gives rise to an integral point on the 
descendant Ta{C), where a is a positive squarefree integer determined by a{P) = 

aQx2. 

3.3. The Weil Homomorphism. The map a : C(Q) — > Qx/Qx2 [g a map 
between two abelian groups; is it a homomorphism? Before we show that the 

answer is yes, we will give another way to motivate the definition of a. 

Consider the Poll conic X'^ — AY'^ = 4. We want to define a 'Weil homomorphism' 
a : C(Q) — > Qx/Qx 2 ^^^^ kernel kera = 2C(Q). Since 2(r,s) = (r^ - 2,rs), we 
could try to map (x,y) to the coset (x + 2)(Q)X2. ^^ns defines a map annihilating 
2C(Q), but is not defined for P = (—2,0). On the other hand, we also have 
2{x,y) = (2 + Ay^,xy); the map {x,y) 1 — > A(a; — 2)Qx2 is defined except for 
{x, y) — (2, 0), and it agrees with the map defined before for all points ^ (±2, 0). 

Now we claim 

Theorem 3.3. The map a : C(Q) — > Qx^qx2 ^ group homomorphism. 

This will be proved using Galois cohomology below. Before we do this, let us 
derive a few consequences. 

Corollary 3.4. The group laws defined on the set of first descendants coincide. 

Proof. Assume that the points P and Q on C(Q) give rise to points on the de- 
scendants Ta and then a{P) — aQ^"^, ct{Q) = bQ^"^, and since a is a group 
homomorphism, a{P + Q) = abQ^"^, hence P + Q gives rise to a point on the 
descendant % with ab = cnn? and c squarefree. □ 

Proposition 3.5. The image of a : C(Z) — > Q^/Q^ 2 consists of all square classes 
aQx 2 for which ab = A for a,b gZ and ar"^ — hs"^ = 4 has an integral solution. 

Proof If aQx2 g ima, then there is a P = {x,y) e C(Z) such that a{P) = 
aQx2^ and by our construction above the point P comes from an integral point 
on ar^ — bs"^ = 4. Conversely, if ar^ — bs^ = 4 has an integral solution, then it 
gives rise to the integral point P = {ar"^ — 2, rs) on the associated Pell conic, and 
a(P) = (a; 2)Qx 2 = aQx 2. □ 

This shows 



Corollary 3.6. The image of a: C(Z) — > Q^/Q^ 2 is finite. 
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Proof. This follows at once from the observation that there are only finitely many 
classes aQ^ ^ with ab = A and a,b E Z. □ 

Now we claim 

Theorem 3.7. We have an exact sequence 

> 2C(Z) > C(Z) — ^ Qx/Q>^2^ 

Proof. We claim that the kernel of the homomorphism a : C{Q) — > (Q^/Q^^ is 
kera = 2C(Q). Moreover, the kernel of the induced map C(Z) — > Q></Q><2 jg 
2C(Z). 

One direction is clear: if {x, y) = 2(r, s) for some (r, s) e C(Q), then x = — 2, 
hence x + 2 = is a square, and this means that (x, y) € kcr a. 

For the converse, observe that [x, y) G ker a if and only if x + 2 = for some 
r G Q. Next, Ay^ = - 4 ^ (x - 2)(a; + 2), hence Ay^ ^ (.x - 2)r2, and thus 
x — 2 = As^ for some s G Q. On the other hand, x — 2 = x + 2~A — r'^—A, hence 

— As^ = 4. Thus (r, s) G C(Q), and it is easily checked that 2(r, s) = (x, y). 

Now consider the restriction of a to C(Z). If a; G Z in the above proof, then clearly 
r eIj, and — As^ = 4 then implies that we also have s G Z if [x, y) G C(Z). □ 

This immediately implies 

Corollary 3.8 (Weak Theorem of Mordell- Weil). The group C (Z) / 2C (Z) is finite. 

In the next section, we will use the theory of heights to prove that C(Z) is finitely 
generated. This implies that C(Z) ~ C(Z)tors © Z^ for some r > 0, and the fact 
that the torsion group C(Q)tors is cychc shows that C(Z)/2C(Z) ~ (Z/2Z)''+i. This 
is the analog of Tate's formula for the 2-rank of an elliptic curve with rational 
2-torsion: 

Proposition 3.9. We have C(Z) ~ C(Z)tors © Z'^ , where r > is determined by 
ima = 2''+i. 

This also implies 

Theorem 3.10. Consider the Weil map a > C{Z) — > Q^/Q^ ^ for the Pell conic 
C : — Ay^ = 4, where A > 0. The following assertions are equivalent: 

(1) C(Z) ~Z/2ZeZ; 

(2) # ima = 4. 

The implication (1) =4« (2) of Theorem 13. 101 is a modern formulation of Dirich- 
let's Theorem |Lem2003bl Thm. 3.3.]. 

Proof of Theorem Let C : X'^ - dY'^ = 4 denote the Pell conic, and [2] : 
C{K) — > C{K) multiphcation by 2. 

Proposition 3.11. We have an exact sequence 

> C(Q)[2] > cm C(Q) > 0, (2) 

where C(Q)[2] = {(-2, 0), (2, 0)} = C(Q)[2]. 

Proof. Let us first prove that [2] is surjective. Given (r, s) G C(Q), we find that 
2{x, y) = (r, s) implies r = x^ — 2 and s = xy. Thus x"^ — r + 2, and either y = 
(if r = —2) or y — ^. In either case, {x,y) G C(Q) satisfies 2{x,y) = {r,s). 

The same formulas show that ker[2] = {(±2,0)}: in fact, if (r, s) — (2,0), then 
a;^ = r + 2 = 4 implies x = ±2 and y = 0. □ 
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Now let G = Gal(Q/(Q)) denote the absolute Galois group of Q. Since C(Q)[2] 
consists of rational points, we have C(Q)[2] ~ Z/2Z as Galois modules, and the 
long exact cohomology sequence gives 

C(Q) — C(Q) > Hi(Z/2Z) > Hi(C) — ^ Hi(C), (3) 

where Yl^{A) = YL^{G,A) and C=C(K). 

Next we compute H^(Z/2Z); we start with the Kummer sequence 

1 , Z/2Z > q"" — > 1 

Taking Galois cohomology and using Hilbert's Theorem 90 we find 

Q"" ) Q"" > Hi(G,Z/2Z) > 1. 

Thus Q'^/Q'' ^ ~ Hi(G', Z/2Z), and © gives rise to an exact sequence 

C(Q) m) > 

It remains to identify the last map. 

To this end, recall the construction of H^: given an exact sequence of G- modules 

y A y B — ^ C > 0, 

we get a homomorphism C'^ — > H^(G, A) as follows: for c G G*^, pick a. b E B 
such that f{b) = c and then define the cocycle x by x{a) — a{b) — b; the image of 
c is then the equivalence class of x. 

This provides us with the isomorphism Q^/Q^^ ~ H^(G, Z/2Z): given a coset 
aQ^^, pick a preimage y/a E Q, and then define the cocycle x : G — > Z/2Z by 
x{a) = a{sfa)l^. 

Next we study the connecting homomorphism b : C(Q)/2C((Q)) — > Hi(Z/2Z). 
Let P = (r, s) £ C{Q). The points Q = (a;, y) G C(Q) such that 2Q ^ P are given 

by 



(v/7T2),s/v/7T2)) ifr^-2, 
(0,2/\/^) ifr = -2. 



Via the homomorphism H^(Z/2Z) ~ Q^/Q^^, the cocycle corresponding to Q is 
identified with the coset 



ftx2 ifr = -2. 



5(P) = 

I ^lAyj ^ li /• = — z. 

Thus S can be identified with the Weil map a : C{Q) — > Q^/Q^ ^, and in particular 
a is a group homomorphism with kernel 2C(Q). 



4. Heights 

For proving that C(Z) is finitely generated, we need more than just the fact that 
C(Z)/2C(Z) is finite. This missing piece of information will be provided by the 
theory of heights. 
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4.1. The Naive Height. For rational numbers a; = ^ in lowest terms, we define 

H{x) = max{|r|, \s\}; 

note that H{Q) ~ 1 and H{x) > 1 for all x E Q. The following lemma is easy to 
prove: 

Lemma 4.1. For x,y E Q we have 

(1) H{xy) < H{x)H{y); 

(2) H{x^) = H{xf; 

(3) Wfo)^^) < H{x + y) < 2H{x)H{y); 

(4) for any c > 0, the set of all x E Q with height H{x) < c is finite. 

The lower bound in (3) follows from the upper bound upon replacing x hy x + y 
and y by —y. 

Our next goal is the definition of the 'naive height' H{P) of rational points P 
on Pell conies. For rational points P = {x, y) E C{Q) on a conic C : — AY'^ = 4 
put H{P) = H{x). We clearly have 

Proposition 4.2. Let C : X'^ - AY^ = A be a Pell conic. For a given constant 
c > 0, the set of all rational points P E C((Q)) with height H{P) < c is finite. 

These rational points have a special form: 

Lemma 4.3. Let {x,y) E C(Q) he a rational point on the Pell conic C : X^ — 
AY^ — 4. Then there exist integers r,s,n such that x — j^, y — ^ and gcd(r, n) = 
gcd(s,7i) ^ 1. 

Proof. Write x — ^, y — with r, s G Z, m, n G N and gcd(r, n) — gcd(s, m) = 1. 
Then r^rn^ — As^r? — Arr?r? shows that \ r'^rr? , and since gcd(r, 7i) = 1, we 
find T? I and n \ m. 

Thus m = kn for some integer k. This gives r^/c^ — As^ — Ak'^n'^, hence fc^ | As^; 
since k \ m and gcd(s, m) — 1 we conclude that k'^ \ A, which implies that k ~ 1 
if A = 1 mod 4 and fc | 2 if A = mod 4. In the latter case, 4fc^ | A implies 
ik^ I r^k'^, hence 2 | r; but this implies k^ \ d and thus fc = 1 as claimed. □ 

We also need some information on the height of the F-coordinates. 
Lemma 4.4. Let {x,y) E C(Q) with y = ^; then \A\s'^ < AH{Pf. 
Proof. We have \ A\s'^ < max{r'^ , 4n'^} < ^{Pf. □ 

Now we claim 

Proposition 4.5. Let Q E C(Q) he fixed. Then for all P E C(Q) we have 

(1) \H{Pf < H{2P) < AH{Pf; 

(2) \H{P) < H{P + Q)< cH{P) for c = 5H{Q). 

Proof For P = {x,y) we have 2P = (x^ - 2,xy), hence H{2P) = H{x'^ - 2). 
Lemma ^3 (3) applied with y — 2 now proves the first claim. For the proof of the 
second claim let P = {x,y), Q = {z,w) with x = ^, y = z = ^, w = ^, and 
gcd(r, m) = gcd(i, n) = 1. Then P + Q^ (^^, ^) = {^-i±^, n^). 
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Clearly 2\mn\ < 2H{P)H{Q); thus it is sufficient to bound the numerator. Here 
we find 

H{P + Q)< \r\ ■ \t\ + |s|\/A • \u\\/A 

< H{P)H{Q) + AH{P)H{Q) = 5H{P)H{Q). 

Replacing Q by —Q shows that H(P — Q) < 5H{P)H{Q). Applying this result to 
P + Q instead of P shows that H{P) < bH{P + Q)H{Q), and this finally shows 
that + > iff (P). □ 

4.2. The Canonical Height. The (naive) logarithmic height of a rational point 
P e C(Q) is defined by /lo(-P) = logff(P). Recall that 

• \hf){2P) - 2ha{P)\ < log4 for all P G C(Q); 

• given Q G C(Q), put c = ho{Q) + log5; then ho{P + Q) < K{P) + c for 
every P G C(Q). 

Now let us define a function h : C(Q) — > M>o by putting 

MP, = li. 

n—^oo Z 

In order to see that this definition makes sense we have to check that the sequence 
{2-"/io(2"P)} is Cauchy. 

We know that |/io(2Q) — 2/io(Q)| < log 4; then n > m > implies 

n-l 

|2-"/io(2"P) - 2-'"/io(2'"P)| = I ^(2-J-i/io(2^+ip) - 2-^ft,o(2^P)) 

n-l 

< J2 2^-'->o(2^+'P) - 2/io(2^P)| 

j=m 
n-l 

< ^2^^-Mog4<2-'"log4. 

Since this expression can be made arbitrarily small by choosing m sufficiently large, 
the sequence is Cauchy, and h{P) is defined. Taking m = in the inequality above 
and letting n — > oo proves 

Proposition 4.6. For all P G C(Q), we have \h{P) - ho{P)\ < log 4. 

This immediately implies 

Proposition 4.7. Let C : — AY'^ = A he a Pell conic. For a given constant 
c > 0, the set of all rational points P G C(Q) with canonical height h{P) < c is 
finite. 

Now we can easily derive the basic properties of the canonical height: 

Theorem 4.8. The canonical height h : C(Q) — > IR>o on the Pell conic C : 
X"^ — AY^ = 4 has the following properties: 

(1) h{T) = Oif and only ifTG C(Q)tors; 

(2) h{2P) = 2h{P); 

(3) /i(P + Q)</i(P)+/i(Q)/ 

(4) h{P) + h{Q) < h{P -Q) + h{P + Q)< 2h{P) + 2h{Q); 
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(5) the square of the canonical height satisfies the parallelogram equality 
h{P - Qf + h{P + Qf = 2h{Pf + 2h{Qf 
for all P,Q€C{Q). 

Proof. (1) If T is a torsion point, then ho{T'^) attains only finitely many values, 
hence is bounded; this implies that h{T) = 0. 

Now assume that h{T) = 0. Then h{kT) = k ■ h{T) for all A: > 1. 
Since \h{P) — /io(-P)| is bounded, the naive heights of the points kT are 
bounded. But there are only finitely many points with bounded height, 
hence {kT : e N} is finite, and this implies that T is a torsion point. 

(2) Directly from the definition we get 

M2P) = hm = 2 hm ^^^^^7^ = 2h(P). 

(3) Now recall that ho{P + Q) < ho{P) + ho{Q) + log 2; this implies 

n — >-oo Z 

- n^oo V 2" 2" 2" / 

= h{P) + h{Q). 

(4) Replacing Q by —Q shows that h{P — Q) < h{P) + h{Q), and adding these 
inequalities yields 

h{P + Q) + h{P -Q)< 2h{P) + 2h{Q). 

Applying this inequality to P — Q and P + Q instead of P and Q yields 

h{P) + h{Q) < h{P + Q) + h{P - Q), 

where we have used h{2P) = 2h{P) and h{2Q) = 2h{Q). 

(5) Let us return to h{P + Q) < h(P) + h(Q)-, replacing P by P - Q yields 
hiP -Q)> h{P) - h{Q). Similarly, h{P + Q) > h{P) - h{Q). Squaring 
and adding yields h{P + Qf + h{P - Qf > 2h{Pf + 2h{Qf. 

Replacing P and Q by P + Q and P - Q shows Ah(Pf + Ah(Qf = 
h{2Pf+h{2Qf > 2h{P+Qf+2h{P-Qf, that is, h{P+Qf+h{P-Qf < 
2h{Pf + 2h{Qf. 

These two inequalities imply the desired equality. 
This concludes the proof. □ 

As a corollary we note: 

Corollary 4.9. We have h{mP) = mh{P) for all m> 1. 

Proof. Put P = mQ in the parallelogram equality. □ 

It is not hard to give explicit formulas for the canonical height of rational points 

on Pell conies: 

Proposition 4.10. The canonical height of P = {x, y) e C(Q), where C is the Pell 
conic given by — AF^ = 4 with A > 0, is h{P) = log lli+Jfb/^^ where x = ^, 
y=^ with {r,n) = (s,n) = 1. 
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Proof. Observe that 2P = C -^"^ , ^) with (r^ - 2^2, n^) = 1, hence H{2P) = 
r2 - 2^2. Also note that ~ 2^^ = )2 + (^^^^ By mduction, we 

conclude that for k — 2™ and r, s > we have 



/i(P) = lim ; = lim — logn 

k — ^oo k k — ^oo k 



— log n + lim — log ( 



2n J \ 2n 
1. /r + sVA\fc r + 



2n J 2 ' 

where we have used that — 1 < < 1- The other cases (e.g. r > 0, s < 0) are 

handled similarly. □ 

There is an even simpler formula if A < 0: 

Proposition 4.11. The canonical height of P — {x,y) € C(Q), where C is the Pell 
conic given by — AY^ = 4 with A < 0, is h{P) = logn, where x — ^, y — 
with n > and (r, n) — {s,n) — 1. 

Proof. We have 2^ P = {xj,yj), where (xk) is the sequence defined recursively by 
xi = X and Xj^i = xj — 2. Clearly we have \xj\ < 2 for all j > 1, so the sequence 
is bounded. 

Assume that \xk\ > 1 for some k; we claim that there is a j > such that 
l^fe+j l < 1- If ^ot, we may assume that Xk > 1 (the case Xk < —1 is treated in 
an analogous way); then |a:fc-|_i| > 1 implies Xk+i > 1. On the other hand, it is 
easily seen that in this case Xk+i < Xk. Thus 1 < Xk+j > 1 for all j > 0, hence the 
sequence converges, and we have 1 < \imxj < Xk < 2; but the only possible limits 
are the roots of the equation = x^ — x — 2 = {x + l){x — 2), that is, a; = — 1 or 
X — 2: contradiction. 

Thus there are infinitely many Xk with \xk\ < 1; if we write x = ^ with n > 0, 
then Xk = r'/n'', hence H{2''P) ^ H{xk) = ti^" ■ We know that \og2-^H{2^P) 
converges to h{P), hence so does the subsequence 2~'^ \ogH{xk) — logn. □ 

Finally, let us look at the heights of points on descendants. If P = (r, s) is a 
rational point on the descendant 7^ : ar^ — bs^ ~ 4 with a6 = A > and a > 0, 
then Q = {ar^ - 2, rs) G C(Q), and now Lemma l4. II implies 

^^i^f ^ \H{ar^) < H{Q) < AH{arf < AaH{r^). 
We have proved 

Proposition 4.12. If If P = (r, s) is a rational point on the descendant Ta : 
ar^ — bs^ _ 4 y^j^^ a6 = A > and a > 0, then Q — {ar^ — 2, rs) G C{Q) satisfies 

—H{Pf < H(Q) < AaHiPf. 
4a 

5. The Theorem of Mordell-Weil 

The Theorem of Mordell-Weil states that the group of rational points on an 
elliptic curve defined over Q is finitely generated. Its analog for conies says that 
the group of integral points on a Pell conic is finitely generated (more generally it 
can be shown that the group of S'-integral points on a Pell conic is finitely generated 
if S is finite). 
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5.1. Mordell-Weil. We now show that C(Z) is finitely generated. The foUowing 
result is the abstract kernel of the proof: 

Theorem 5.1. Let G be an abelian group such that G/2G is finite. Assume that 
there exists a function h : G — » E>o with the following properties: 

(1) For every c > 0, the set {g ^ G : h{g) < c} is finite; 

(2) We have h{2g) = 2h{g) for all g € G; 

(3) h{g - g'f + h{g + g'f = h{gf + h{g'f for all g, g' e G. 

Then G is finitely generated. 

Proof. Let F be a set of representatives of the finitely many cosets of G/2G. Then 
each g € G can be written as g — ^ = 2g' for some 7 e F and a, g' G G. Put 
c = max{ft,(7) : 7 <E F}. 

Now let V, denote the subgroup of G generqated by all the elements of F and the 
(finitely many) elements g € G with h{g) < c. We claim that G = fl. 

If not, then let g be an element in G with minimal height such that g ^ il; 
observe that h{g) > c. We can write g — ^ = 2g' for some 7 e F and g' G G, and 
find 

Ah{g'f = h{g - = 2h{gf + 2h{^f - h{g + 7)' < 2h{gf + 2c^ < Ah{gf. 
Thus h{g') < h{g), hence g' G O. But then so is 5 = 2g' + 7: contradiction. □ 

Applying this to our situation we find 

Corollary 5.2. Let C : - AF^ = 4 be a Pell conic. Then the group C(Z) is 
finitely generated, that is, C(Z) ~ C(Z)tors ® '^^ for some finite group C(Z)tors o,nd 
some integer r > called the rank ofC. Moreover, ima = 2''+^. 

The torsion group of C(Q) is easy to determine: torsion points (x, y) have integral 
coordinates, and we have y = or y = ±1. In fact, if fc > 2 is an integer and 
P ^ iV = (2, 0) a rational point on C with kP = N, then Q(Cfe) C Q(v^). Thus 

{(±2,0),(±1,±1)} if A = -3, 
{(±2,0), (0, ±2)} if A = -4, 
{(±2,0)} otherwise 



6. Selmer and Tate-Shafarevich Groups 

The subset of curves T(a) : ar^ — bs^ = 4 with a rational point corresponds to 
a subgroup Sel2(C) of Q></Q><2 ^g^^^^^ ^^le 2-Selmer group of C; we have already 
shown that if 7^ and 7^' have a rational point, then so does Ta", where aa' = a"k'^ 
for some positive and squarefrce integer a" | A. The same argument shows that the 
curves Ta with an integral point form a group W2(C), which is clearly a subgroup 
of Sel2(C) isomorphic to ima. The 2-part of the Tate-Shafarevich group 1112(C) is 
then defined by the exact sequence 

1 > W2(C) > Seh{C) > m2(C) > 1. (4) 

In this section, we shall study these groups. 
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6.1. The 2-Selmer Group. 

Proposition 6.1. The first descendant T{a) : ax^ — by^ — 4, where ab = A and 
a > 0, has a rational point if and only if (a/q) — {—b/p) = +1 for all odd primes 
p I a and q \ b. 

Proof. Legendre's theorem states that the ternary quadratic form ax^ + by'^ + cz^, 
where a,b,c € 1 are coprime and squarefree, represents over the integers if and 
only if it represents over the reals and over the fields Z/pZ, where p runs through 
the odd primes dividing abc. □ 

Note that ax^ — by^ — 4 has rational solutions if and only if — aY^ + AZ^ has 
integral solutions, hence the criteria in ProDOsition l6. H are equivalent to (^^) = +1 
for all odd primes p \ A; since A > 0, the Hilbert symbol at oo is trivial; finally, 
(^^) = +1 for all odd primes p -f A, and now the product formula implies that we 
have (^^) = +1 as well. This shows 

Corollary 6.2. The first descendant T{a) : ax'^ — by^ = A, where a6 = A and 
a > 0, has a rational point if and only if (^^) = +1 for all primes p. 

Example. Consider C(Z) for C : x^ — 1045?/^ = 4. The associated descendants with 
an integral point (r, s) and the corresponding point (x, y) on C are given below: 



a 




(r,s) 




1 

5 


r^ - 1045s^ = 
5r2 - 209s2 = 


4 
4 


(2,0) 

V3' 3'' 


(2,0) 


11 
19 


llr^ - 95s2 = 
19r2 - 55s2 ^ 


4 

4 


(3,1) 


(97,3) 


55 


55r2 - 19s2 = 


4 






95 


95r2 - lls2 = 


4 






209 


209r2 - 5s2 = 


4 






1045 


1045r2 - s2 = 


4 







Thus Sel2(C), viewed as a subgroup of Q^/Q^ ^, is isomorphic to (5, 11); moreover 
W2{C) = (11), and the nontrivial element of III(C)[2] ~ Z/2Z is generated by T5. 

6.2. Redei. Recall from |Lem2003B| that a factorization of the discriminant A — 
discfc into discriminants A — A1A2 is called a splitting of the second kind if 
(A1/P2) = (A1/P2) = +1 for aU primes | A^. 

Proposition 6.3. Assume that A is a product of positive prime discriminants. 
Then the factorization A — Ai A2 is a splitting of the second kind if and only if the 
descendant AiX'^ — A^^^^ = 4 is everywhere locally solvable. 

Thus Redei's group structure on splittings of the second kind induces a group 
structure on Sel2(C) that coincides with ours. Since there are exactly 64 + 1 inde- 
pendent splittings of the second kind (including the trivial factorization A = 1 • A), 
this shows that Redei's results imply that #Sel2(C) = 2#Cl+(fc)VCl+(fc)4. 

In general, however, the C4-decompositions and the first descendants in the 
Selmer group are not related. Consider e.g. the example d — 12369 = 3 • 7 • 19 • 31; 
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here the elements in the Sehner group and the corresponding rational points are 
given by 

r^- 123695^ = 4 (r, s) = (2, 0) 

7r2- 1767^2 = 4 (^,5) = (f,|) 

589r2-21s2 = 4 
4123r2-3s2=4 

The C4-deconipositions, on the other hand, are A = 1 • 12369 and A = 93 • 133, 
and the equation 93a;^ + 133?/^ = has the solution (x, j/, z) = (6, 1, 59). 

6.3. The 2-Part of the Tate-Shafarevich Group. Consider the descendant 
T(a) : ar^ - hs^ = 4; we know that T(a) G Sel2(C) if and only if (^) = +1 for all 
places p (observe that (^) = +1 for all primes p f d). 

Consider the map cl : Sel2(C) — > Cl^(fc)[2] sending T(a) to the ideal class gen- 
erated by the ambiguous ideal a with norm a; clearly kercl = W{C). By Hilbert's 
genus theory (see jLem2000] V we know that ideal classes coming from the Selmer 
group are squares, so the map above is actually a homomorphism Sel2(C) — > 
Cl+(fc)2 nCl+(fc)[2] = Cl+(fc)2[2]. Conversely, an ideal class in Cl+(fc)2[2] is gener- 
ated by an ambiguous ideal o with norm a \ A, and since its class is a square, its 
character system is trivial, so the descendant T(a) is in the Selmer group. 

Theorem 6.4. We have an exact sequence 

> W{C) > Scl2(C) > Cl+(fc)2[2] > 0. 

In particular, m2(C) ~ C\+{k)^[2]. 

Observe that, for finite abelian groups G, we have the exact sequence 

1 > G2 n G[2] > G2 G^ > 1 

showing that G^ n G[2] ~ G^/C^ (non-canonically via duahty), hence Cl+(fc)2[2] ~ 
Cl^(fc)^/Cl^(fc)'*. Since this group can be made arbitrarily large, we find 

Corollary 6.5. For Pell conies C : — AY^ — 4, the Tate-Shafarevich group 
1112(C) can have arbitrarily large 2-rank as A varies. 

6.4. For Whom the Pell Tolls. Let us now derive some results about Pell equa- 
tions that follow from studying the 2-Selmer group. 

Selmer Groups. The following result connects the structure of the Selmer group 
to various invariants studied in jLem20fl3bj : 

Proposition 6.6. Let A be a discriminant not divisble by any prime = 3 mod 4, 
letC : — AY^ = 4 be the corresponding Pell conic, and let 7(A) be the associated 
nondirected graph (see |Lem2003b] ). Then the following claims are equivalent: 

(1) 7(A) is odd; 

(2) Sel2(C) ~ Z/2Z; 

(3) m(C)[2]=0; 

(4) 4,-rank ClJ(fc) 0. 
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Proof. The equivalence of the statements (2)-(4) follow from the exact sequence (0} 
and Theorem 16.41 

The fact that 7(A) is odd if and only if none of the equations ar^ — bs^ = 4 has 
Fp-rational points for all primes p was proved in ^Lem2003bj . □ 

Nontrivial Tate-Shafarevich Groups. If a is a quadratic residue modulo a 
prime p, then we write (|)4 = +1 or —1 according as a is a fourth power modulo p 
or not. If p = 1 mod 8, then we define (|)4 — (— 1)*^^^^^/^. We extend these residue 
symbols multiplicatively to composite denominators. 

Theorem 6.7. Let A — pi ■ ■ ■ pn be a product of primes pi = 1 mod 4. If ab = A 

and ar^ —bs^ = 4 has an integral solution, then the following conditions are satisfied: 

(1) (a/q) = 1 for all primes q \ b; 

(2) (b/p) = 1 for all primes p \ a; 

(3) (6/0)4 = +1- 

Proof. The first two assertions are clear and follow from the existence of a rational 
point. 

For any prime p \ a, we have (—6/^)4 — {2s/p); since (—1/^)4 — (2/p), this 
implies {b/p)4 — [s/p), hence {b/a)^ ~ (s/a). Now write s — 2^s' with s' odd; 
then {b/a)i — {s/a) = {2/ay . If j = or j — 2, we are done. The case j = 1 is 
impossible: putting r = 2r' we find ar'^ — bs'^ = 1, which leads to a contradiction 
modulo 4 since bs'^ = 1 mod 4. Finally, if j > 3, then dividing ar^ — bs^ = 4 
through by 4 and reducing modulo 8 shows that (2/a) = +1. □ 

There are similar results for even A not divisible by primes = 3 mod 4. 

Let us now apply this result to the Pell equation X"^ — pqY^ = 1 , where p = 
q = 1 mod 4. The first descendants pr^ — qs^ = ±1 are not solvable in integers if 
(p/q) — —1, so in this case we conclude that X^ — pqY"^ = —1 is solvable. Assume 
that {p/q) = +1. Then Theorem 16.71 provides us with necessary conditions for the 
descendant 7^ to be solvable: Thus if {p/q)i ~ {q/p)i = —1, the negative Pell 



a 


equation 


condition 


1 




none 


P 


pX"^ -qV^ = 1 


{q/p)i = 1 


q 


qX^ -pY^ ^1 


{p/q)A = 1 


pq 


pqX^ - y2 ^ 1 


? 



Table 1 . Solvability Criteria for T 



equation X^ —pqY^ ~ —1 must be solvable. If, say, {p/q)^ — —{q/p)^, however, we 
do not get a precise result because Theorem 16 . 71 does not give us any condition for 
the solvability of Tpq. For this, we have to dig deeper: 

Proposition 6.8. If Tpq : pxr^ — s'^ — 1 has an integral solution, where p = q = 
1 mod 4 are primes with {p/q) — 1, then {p/q)^ = {q/p)^. 

This implies the following result, parts of which were first proved by Scholz 
|Schl934| using class field theory: 
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Proposition 6.9. Letp — q — I mod 4 be primes. If the conditions (*) are verified, 
the descendant Ta of the Pell conic — pqY^ = 1 is solvable: 





a 




ip/q) = 


-1 


pq 


ip/q) = 


f 1, ip/q)i = 


-l,(g/p)4 = +l 


p 


ip/q) = 


f 1, {p/q)4 - 


+ l,(g/p)4 = -1 


q 


ip/q) = 


^1, {p/q)4 = 


-l,(g/p)4 = -1 


pq 



Note that this impHes e.g. that if (p/q) = +1, {p/q)-i = +1 and {q/p)i — — 1, 
then Tq is an element of the Selmer group without an integral point, hence represents 
an element of order 2 in III(C). 

The proof of Proposition 16.91 presents no problems; thus it remains to prove 
Proposition This is done as follows: factor the right hand side oipqs^ ~ r"^ + 1 
over the Gaussian integers Since gcd(r + i, r — i) divides 2i, and since r is even, 
the factors r + i and r — i are coprime. Now observe that p = tttt and q — pp for 
TT, p £ Z[z], where the bars denote the conjugates. Assume that tt and p are primary, 
i.e., that tt = p = 1 mod 2 + 2i. Then Unique Factorization in Z[j] implies that 
r + i = e-npa^ for some a S and some unit e E {±z, ±1}. Since r + i = i mod 2, 
and since = 1 mod 2, we have e = ±i, and by subsuming the square —1 — 
into a if necessary we arrive at r + i = iirpa^. 

If, from this equation, we subtract its conjugate and then divide by i, we arrive 

at 

2 = Trpa^ — Txpo? . 

Reducing modulo p we find [2/p] = [7r/p][p/p], where [ • / ' ] ^^e quadratic residue 
symbol in Z[i] (see .Lem2000] for the necessary background). Then it is known 
that [2/p] = (2/q) and [p/p] = (2/g), as well as [tt/p] ^ [tt/p] ^ [p/ q)i{q/p)i. This 
concludes the proof of Proposition 16. 81 
This allows us to complete Table lOl 



a 


equation 


condition 


1 


X^- 


pqY^ = 1 


none 


P 


pX^- 


-qY^ = 1 


iq/p)i - 1 


q 


qX^- 


-pY^ = 1 


{p/q)i = 1 


pq 


pqX^ 


-Y^ = l 


{p/q)i{q/p)i = 1 



Table 2. Solvabihty Criteria for T 



In some sense, the solvability condition for the product Tpq of Tp and Tq is the 
'product' of the conditions for Tp and Tq\ although we cannot make this more precise 
at the moment, this observation often helps to guess the right criteria. 

Observe that the proof of Proposition 16.91 is fully analogous to the calculations 
done in |Lem2003a| for computing Tate-Shafarevich groups of elliptic curves con- 
nected to the congruent number problem. 
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